2015-01-05

In the best of worlds, we could all trust each other not to compromise security qualities of information - neither intentionally nor accidentally.

In the real world there is not sufficient trust in this regard. Instead, we need to implement protective measures to uphold sufficient information security. When we cannot trust other parties as much as we like to, we need to establish trust in our protective measures instead.

What does it mean to trust a system? How do we create and maintain such trust?